CVE-2024-2007

A vulnerability was found in OpenBMB XAgent 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Privileged Mode. The manipulation leads to sandbox issue. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-255265 was assigned to this vulnerability.
References
Link Resource
https://github.com/OpenBMB/XAgent/issues/386 Issue Tracking Third Party Advisory
https://vuldb.com/?ctiid.255265 Permissions Required VDB Entry
https://vuldb.com/?id.255265 Third Party Advisory VDB Entry
https://github.com/OpenBMB/XAgent/issues/386 Issue Tracking Third Party Advisory
https://vuldb.com/?ctiid.255265 Permissions Required VDB Entry
https://vuldb.com/?id.255265 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:openbmb:xagent:1.0.0:*:*:*:*:*:*:*

History

02 Jun 2025, 15:32

Type Values Removed Values Added
CPE cpe:2.3:a:openbmb:xagent:1.0.0:*:*:*:*:*:*:*
First Time Openbmb xagent
Openbmb
References () https://github.com/OpenBMB/XAgent/issues/386 - () https://github.com/OpenBMB/XAgent/issues/386 - Issue Tracking, Third Party Advisory
References () https://vuldb.com/?ctiid.255265 - () https://vuldb.com/?ctiid.255265 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.255265 - () https://vuldb.com/?id.255265 - Third Party Advisory, VDB Entry

21 Nov 2024, 09:08

Type Values Removed Values Added
References () https://github.com/OpenBMB/XAgent/issues/386 - () https://github.com/OpenBMB/XAgent/issues/386 -
References () https://vuldb.com/?ctiid.255265 - () https://vuldb.com/?ctiid.255265 -
References () https://vuldb.com/?id.255265 - () https://vuldb.com/?id.255265 -

21 Mar 2024, 02:52

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-21 02:52

Updated : 2025-06-02 15:32


NVD link : CVE-2024-2007

Mitre link : CVE-2024-2007

CVE.ORG link : CVE-2024-2007


JSON object : View

Products Affected

openbmb

  • xagent
CWE
CWE-265

Privilege Issues